Privacy and Cookie Policy

The personal data collected through this site is processed by:

Campus Astrologia LLC
16192 Coastal Highway, Lewes, DE 19958, USA
Contact: soporte@campus‑astrologia.es

Campus Astrologia LLC is a limited liability company organized under the laws of the State of Delaware, United States, and operates acupuntura.app and shenmen.app.

We collect the following types of personal data:

• Registration data: full name, username, email address, gender and other profile data that the user provides voluntarily, such as birth data (date, time and place) and geographic location, used for the operation of the astrological tools.
• Payment data: information needed to process transactions, handled securely by Stripe and/or PayPal. We do not store full credit card details.
• Educational usage data: progress in courses, completed lessons, assessment scores and certificates earned.
• Browsing data: IP address, browser type, pages visited and time spent, collected through analytics cookies if you have given your consent.
• Communication data: messages sent through the contact form or contributions to the community forum.
• Security verification data: technical browser information processed by Cloudflare Turnstile to prevent spam and automated access during registration and login.

We use your data for the following purposes:

• Managing your user account and giving you access to the platform.
• Processing purchases and managing access to the courses you have bought.
• Tracking your educational progress and issuing certificates.
• Sending you communications related to your account and purchased courses.
• Sending you newsletters and commercial communications if you have given your consent.
• Improving our services and the user experience through usage analysis.
• Preventing fraud, spam and unauthorized access.
• Complying with applicable legal and tax obligations.

The processing of your data is based on:

• Performance of a contract: to provide you with the educational services you have contracted and to manage your account.
• Consent: for sending commercial communications and for the use of non-essential analytics cookies. You may withdraw your consent at any time.
• Legitimate interest: to improve the services, ensure the security of the platform and prevent fraud.
• Legal obligation: to comply with applicable tax and commercial regulations.

We share data with the following service providers, strictly as necessary for the operation of the platform:

• Stripe: card payment processing. Privacy policy available at stripe.com/privacy.
• PayPal: alternative payment processing. Privacy policy available at paypal.com/privacy.
• Google LLC (Analytics): web traffic analysis, only if you have accepted analytics cookies. Data may be processed on Google servers in the United States. Google operates under Standard Contractual Clauses approved by the European Commission.
• Campus Analytics: our own traffic analysis system hosted at analytics.acupuntura.app, active only with your prior consent.
• Google LLC (Sign-In): if you choose to sign up or log in with your Google account, Google will process the data needed for authentication.
• Google LLC (Google Calendar): only if a professional voluntarily connects their Google Calendar account to the Clinic. Detailed in section 6.
• Cloudflare, Inc. (Turnstile): anti-spam verification service active during registration. Cloudflare processes technical browser data to tell humans from bots.
• Hosting providers: the servers where data is hosted are located in the European Union.

We do not sell or transfer your personal data to third parties for commercial purposes.

The acupuntura.app Clinic lets each professional connect, if they wish, their own Google Calendar account to sync their practice schedule. The connection is optional, is started by the professional with the "Connect with Google" button, and requires their express authorization on Google's consent screen.

Permissions we request. We request only two Google Calendar permissions: managing events (https://www.googleapis.com/auth/calendar.events) and viewing the list of calendars in read-only mode (https://www.googleapis.com/auth/calendar.calendarlist.readonly). We cannot create or delete calendars, and we do not request access to email, contacts, Google Drive or any other Google service.

Google data we access:
• The list of calendars the account can write to (identifier, name and color), only so that the professional can choose which one their appointments are saved in.
• The events of the chosen calendar, and only that calendar: title, description, start and end date and time, whether they last all day, and their identifier.
• The authorization tokens that Google issues to keep the connection active.

What we use it for. Exclusively to provide the schedule sync that the professional has turned on:
• Creating, editing and deleting in Google Calendar the events that correspond to the appointments the professional creates, edits or deletes in the Clinic.
• Showing in the Clinic schedule the events of the chosen calendar and reflecting in it the changes and deletions made in Google Calendar.

Events are created without guests and without sending notifications to third parties. At the beginning of each event's description, the Clinic adds the appointment status, the name of the linked patient (if any) and a link to open the appointment in the Clinic, so the professional can see them from their own Google Calendar. The rest of the patient record (history, measurements, treatments) is never sent to Google.

What we do not do:
• We do not read or modify calendars other than the chosen one.
• We do not use Google Calendar data for advertising, profiling or any purpose other than the sync, and we do not sell it or transfer it to third parties.
• We do not use Google Calendar data to train artificial intelligence models.
• No member of our team reads this data, except with the professional's express consent to resolve an incident, for security reasons, or to comply with the law.

Limited Use. The use and transfer to any other app of information received from Google APIs by acupuntura.app adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security. Authorization tokens are stored in our database, on servers in the European Union, associated with the professional's account. They are never sent to the browser or written to logs. Communications with Google are always encrypted (HTTPS). Synced appointments are stored in the Clinic just like those created by hand.

Disconnection and deletion. The professional can disconnect Google Calendar at any time from the Google Calendar button in the schedule, under "Disconnect". When they do, we revoke the authorization with Google and delete the tokens from our database. They can also withdraw access from their Google account's permissions page. Events that were already synced remain in their Google Calendar and in their Clinic schedule, and they can delete them whenever they want. If they delete their acupuntura.app account, their Google tokens are deleted as well.

Patient data. Each professional is responsible for the processing of their patients' data. What reaches their Google Calendar is the title and description of each appointment, the status and the name of the linked patient; nothing else from the record. We recommend not writing health data in the title or the description.

You have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Restriction: restrict the processing of your data in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data for direct marketing purposes.
• Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.

To exercise any of these rights, write to us at soporte@campus‑astrologia.es or use the contact form. We will handle your request as quickly as possible.

We keep your personal data for as long as you maintain an active account on the platform. After your account is deleted, we will keep the data strictly necessary for as long as applicable legal or tax obligations require.

Anonymized browsing data may be kept indefinitely for statistical purposes.

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or destruction. These measures include:

• Encryption of data in transit via HTTPS/TLS.
• Secure password storage using hashing algorithms.
• Role-based access control.
• Anti-spam verification on access forms.
• Regular backups.

We reserve the right to update this policy. Any significant change will be notified through the platform or by email. We recommend reviewing this page periodically.

Last updated: September 2026.